Administrators reset authenticators or Multi-Factor Authentication (MFA) factors for users who require re-enrollment or have lost access to their devices. Resetting these factors allows users to set up their authentication methods again during their next login. Navigate to the Directory section of the Admin Console to reset authenticators for specific users or in bulk across both Okta Identity Engine (OIE) and Okta Classic Engine.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Multi-Factor Authentication (MFA)
• Authenticators

What are the steps to reset authenticators for a specific user in OIE?

Reset an authenticator for a specific user in OIE by navigating to the user profile and selecting the reset option from the actions menu.

1. In the Admin Console, navigate to Directory > People.
2. Select the specific user.
3. Select More Actions in the top right area of the user profile.
4. Select Reset Authenticators.

5. Select the factors to reset from the displayed list.

6. After the reset, Okta prompts the user to re-enroll in the MFA policy during the next login. There is no time limit on the ability to re-enroll.
   • NOTE: To reset all factors for multiple users in OIE, follow Reset User Factors in Bulk Using Rockstar and Postman.

What are the steps to reset all factors for one or more users in the Okta Classic Engine?

Reset all MFA factors for one or multiple users simultaneously in Okta Classic Engine by using the bulk reset feature in the directory.

NOTE: This action resets all factors for the selected users. Users must set up all their factors again.

1. In the Admin Console, navigate to Directory > People.
2. Click Reset Multifactor.

3. Select the users requiring an MFA reset.
4. Click Reset Multifactor Authentication. Okta displays a confirmation prompt.
5. Click Reset to proceed. Okta cannot undo this action.

How does an administrator reset one or more factors for a single user in Okta Classic Engine?

Reset one or more specific factors for a single user in Okta Classic Engine by accessing the user profile and selecting the desired factors to reset.

NOTE: This action allows selecting and resetting any of the configured factors. Users must set up only the reset factor again.

1. In the Admin Console, navigate to Directory > People.
2. Select the user requiring an MFA reset.
3. Click More Actions, and then select Reset Multifactor or Reset Authenticators.

4. Select the factors to reset.
    
5. Click Reset Selected Factors or Reset All. Okta displays a confirmation prompt. 
   • NOTE: The Reset All option is only available for the Okta Classic Engine.
6. Click Reset to proceed. Okta cannot undo this action.

Related References

• Reset Multi-Factor Authentication for end users